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MEMORANDUM FOR: Director, National Reconnaissance Office 


FROM; Robert W. Gambino 
Director of Security 


SUBJECT: Security Violations Occurring at NRO 
Prograa Office Contractor Facilities -- 
Definition of and Reporting Procedures 


REFERENCE: ent for Reorganization of the NRP 
5678-65) dated 11 August 1965 


1. During security audits conducted at Agency- funded 
and NRO-funded contractors as a result of the Boyce/Lee 
Case, it has become apparent that some contractors have not 

operly interpreting Section I, Paragraph 0G) of the 
Industrial Security Manual. Instead of reporting 
urity violations as required, many contractors have 
adopted the policy of reporting only violations which have, 
in their judgment, resulted in compromise or which they felt 
could potentially result in compromise. They have not 
uniformly reported other matters such as open safes or 
unsecured classified material found by guards, preferring 
to regard them simply as security "discrepancies" rather 
than as violations. 


2. The Director of Central Intellicence has expressed 
concern regarding this situation and agrees that such a - 
lack of complete reporting is unagteptable. The following 
policy will, therefore, apply with regard to ali contracts 
under the cognizance of the Central Intelligence Agency: 


“SECURITY VIOLATION: Any breach of security 
regulations, requirements, procedures or guides by an 
individual which subjects classified or sensitive 
material or information ‘to compromise to unauthorized 
persons, or which places it.in jeopardy where a com- 
promise could result, constitutes a be ahha security 
violation. Such a breich includes’ both acts of omission aia 
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such as failure to properly secure classified or 
sensitive material, and acts of commission such 

as discussion of classified or sensitive information 
over nonsecure telephone circuits. The inforszation 
and materiais referred to in this definition comprise 
Collateral classified, SCI classified, and those 
materials and information which are sensitive because 
they involve intelligence sources and methods.” 


3. Pursuant to paragraph 2C($) of reference, it is 
at you disseminate this definition to eae! 25X1A 
aii: their notification ef the appropriate contractors, 

4. Along with the definition, please forward a copy of 
the attached Security Violation Report Form. It may be repro- 
duced locally by each contractor a3 necessary. Please tell 
your Program Offices to inform their contractors that the 
Security Violation Report Forms, when filled in, are to be 
classified a minimum of SECRET because they relate to SCI 
contracts. Full Program names should not be used in reporting 
SCI violations on this Security Violation Report Form because 
the individual security f1les in which they will be maintained 
will not in every case be in a compartmented area. If it does 
become necessary for the contractor to report SCI details of a 
violation, those facts should be Separately stated in an attach- 
Bent which is to be maintained by the Program Office under SCI 
control, 


5. Please advise this Office when the actions in paragraphs 
3 and 4 have been accomplished. 
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FOR THE DIRECTOR OF CENTRAL INTELLIGENCE: 
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_Attachment 


Distribution: 
 €opy 1 -_p 
3 - D/Sec 
4 - DD/PTOS 
5 - OS/Reg 
6 - SSC 
(7+ C/ISB 
8 - ISB chrono 


a For Release 2002/01/09 : CIA-RDP96B01172R001000150008-8 
“ sce (29 Dec 77} SECRET 


25X14 Approved For Release 2002/01/09 : CIA-RDP96B01172R001000150008-8 


Approved For Release 2002/01/09 : CIA-RDP96B01172R001000150008-8 


